Legal Center

Aditus Labs Inc.

Last updated: [DATE]. Operated by Aditus Labs Inc.

  1. Introduction

This Privacy Notice explains how Aditus Labs Inc. ("Aditus", "we", "us") collects, uses, and shares information when you use OAccess, available at oaccess.link and related surfaces (the "Service"). Aditus is the controller of the personal information described here.

  1. Information We Collect

Account information. When you create an OAccess account, we collect information needed to authenticate you, such as your email address or other sign-in identifier, and basic account metadata.

Transaction information. When you initiate a purchase, we process information such as the asset and chain you select, the amount, the wallet address you provide, and the status of the transaction.

Technical information. We collect device, browser, and usage information (such as IP address, log data, and analytics events) to operate, secure, and improve the Service.

What we do not collect. Aditus does not collect or store your payment card details, bank information, or government identification documents. Identity verification (KYC) and payment information are collected and processed directly by our licensed payment provider (MoonPay), under its own privacy policy. Aditus does not hold your funds or private keys.

  1. How We Use Information

We use information to provide, operate, and maintain the Service and your account; to facilitate and track transactions you initiate, and to coordinate with third-party providers; to secure the Service and prevent fraud and abuse, including jurisdiction and sanctions screening of accounts; to comply with legal obligations; and to analyze and improve the Service.

  1. How We Share Information

We share information with: licensed and protocol providers (e.g., MoonPay for payment and KYC, Relay for settlement) as needed to complete a transaction you initiate, acting under their own privacy policies and terms; service providers that support our operations (e.g., hosting, authentication, analytics) under appropriate confidentiality obligations; legal and safety recipients where required by law, regulation, legal process, or to protect rights and safety; and parties to a corporate transaction such as a merger, acquisition, or financing, subject to this Notice.

We do not sell your personal information.

  1. Data Retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. [COUNSEL TO SET RETENTION PERIODS.]

  1. Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at [CONTACT EMAIL]. [COUNSEL TO CONFIRM GDPR / UK-GDPR / CCPA / PIPEDA RIGHTS LANGUAGE FOR YOUR USER GEOGRAPHY.]

  1. International Transfers

Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers. [COUNSEL TO CONFIRM TRANSFER MECHANISM.]

  1. Security

We use reasonable technical and organizational measures to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

  1. Children

The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect information from children.

  1. Changes

We may update this Notice from time to time. Material changes will be indicated by updating the "Last updated" date and, where appropriate, by additional notice.

  1. Contact

Aditus Labs Inc. — [CONTACT EMAIL] — [ADDRESS].